ivosimic Frequent Contributor.
Frequent Contributor.
556 views

Office 365 - NoPermissionsInAccessToken

Hi all

I am trying to connect MF OO and Office 365 (Azure).

I have created application on Azure Portal, I have asked for API permission (Microsoft Graph – Delegated – Mail. Read, User.Read, Mail.Read.Shared, email, opened, profile) and Administrator granted permissions.

In workflow in Get Authorization Step I have loginAuthotrity = https://login.microsoftonline.com/(tenantId)/oauth2/v2.0/token; resource = https://graph.microsoft.com; loginType = API, clientId, ClientSecret and webproxy populated. I have put result to variable and i can see token in varaible. Next step is Get Message with all inputs populated and token from varible (first step).

When I run workflow I have error on second step “NoPermissionsInAccessToken” with “The token contains no permissions, or permissions can not be understood.”

Labels (1)
Tags (1)
0 Likes
16 Replies
Micro Focus Contributor
Micro Focus Contributor

Re: Office 365 - NoPermissionsInAccessToken

Please put the Get Message input values in a table and share them. You can replace any sensitive data with garbled characters.

It's very easy to provide wrong values, the Graph API is convoluted.

0 Likes
ivosimic Frequent Contributor.
Frequent Contributor.

Re: Office 365 - NoPermissionsInAccessToken

tnx for help.

since Get Message is complicated i have replaced it with List Messages.

i have three inputs:

authTokeneyJ0eXAiOiJKV1QiLCJub25jZSI6Ikexample
userPrincipalNamejohn_smith@example.onmicrosoft.com
proxyHostproxy.com

 

same error

0 Likes
Micro Focus Contributor
Micro Focus Contributor

Re: Office 365 - NoPermissionsInAccessToken

If the access rights have been defined in the Azure Portal, like in the example screen bellow, and the Grant Permissions button has been pressed after the rights were assigned then the only possible explanation is a typo somewhere. Please also show the inputs given to the Generate Auth Token operation.

api.jpg

0 Likes
ivosimic Frequent Contributor.
Frequent Contributor.

Re: Office 365 - NoPermissionsInAccessToken

hm.

my azure permissions. i have asked for MS Graph rights and i see in your picture Office 365 Exchange Online grants. is this source of my problems?

Capture.PNG

0 Likes
Micro Focus Contributor
Micro Focus Contributor

Re: Office 365 - NoPermissionsInAccessToken

Technically Mail.Read rights an be found in both Exchange Online and Graph APIs, this is Microsoft's way of being ambiguous. I'm looking at our internal apps and it looks like we managed to use both of them with success, but in order o eliminate variations can you also assign Exchange Mail.Read rights?

0 Likes
ivosimic Frequent Contributor.
Frequent Contributor.

Re: Office 365 - NoPermissionsInAccessToken

i have added legacy exchange rights.

no luck. still the same error.

do i need to wait for some time?

Capture.PNG

 

 

 

 

 

 

 

 

 

i dont have Office 365 Exchange Online to choose. only this legacy Exchange.

0 Likes
Micro Focus Contributor
Micro Focus Contributor

Re: Office 365 - NoPermissionsInAccessToken

Looks like Admin Consent is no longer checked.

0 Likes
Micro Focus Contributor
Micro Focus Contributor

Re: Office 365 - NoPermissionsInAccessToken

This is how the rights look for me in the new and "improved" management page. Looks like Exchange online is now Exchange.api2.jpg

0 Likes
ivosimic Frequent Contributor.
Frequent Contributor.

Re: Office 365 - NoPermissionsInAccessToken

it says tath admin consent is not required. i have assked for admin consent for Graph APi permission and our admin gave grants.

my input for Get Authorization is sam as yours in post about documentation except for loginAuhority where i use https://login.microsoftonline.com/(tenantID)/oauth2/v2.0/token. i tried with yours version https://login.windows.net/tenantID/oauth2/token but i got sam error

Capture.PNG

0 Likes
ivosimic Frequent Contributor.
Frequent Contributor.

Re: Office 365 - NoPermissionsInAccessToken

Maybe MF OO is only working with Legacy API and i have to get admin consent for this new permission?

Person who is granting permission is on vacation. She will be back in 10 days.

so for now i have to wait and focus on other tasks.

tnx for help

i will post result when i get consent for legacy API.

0 Likes
Frequent Contributor.. JonathasSouza Frequent Contributor..
Frequent Contributor..

Re: Office 365 - NoPermissionsInAccessToken

Please, send us updates about the results.
I have the same problem.
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Office 365 - NoPermissionsInAccessToken

Hi Jonathas,

Team is doing their best to help here. Is it possible to submit a support incident on your issue?

Thanks,

Lucian

0 Likes
Frequent Contributor.. JonathasSouza Frequent Contributor..
Frequent Contributor..

Re: Office 365 - NoPermissionsInAccessToken

Hi, @Lucian-Revnic .

It's the first thing I did. They told me that "this type of Content pack is supported by the Micro Focus Community " and so they couldn't help me.

 

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Office 365 - NoPermissionsInAccessToken

Hello,

If you are using the content below the Micro Focus Support team should accept the incident.

In the ITOM Marketplace Portal this content appears as "Micro Focus Supported". 

O365.png

Lucian

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.